Netscape DIRECTORY SERVER 6.02 - ADMINISTRATOR Administrator's Manual page 228

Creating ACIs From the Console
c.
In the Access Control Editor, click the Rights tab, and use the checkboxes to
4.
select the rights to grant.
Click the Targets tab, then click This Entry to display the node targeted by the
5.
ACI.
You can change the value of the target DN, but the new DN must be a direct or
indirect child of the selected entry.
If you do not want every entry in the subtree under this node to be targeted by
the ACI, you must enter a filter in the Filter for Sub-entries field.
Additionally, you can restrict the scope of the ACI to only certain attributes by
selecting the attributes you want to target in the attribute list.
Click the Hosts tab, then the Add button to display the Add Host Filter dialog
6.
box.
You can specify a hostname or an IP address. If you specify an IP address, you
can use the wildcard character (*).
Click the Times tab to display the table showing at what times access is
7.
allowed.
By default, access is allowed at all times. You can change the access times by
clicking and dragging the cursor over the table. You cannot select discrete
blocks of time.
When you have finished editing the ACI, click OK.
8.
The ACI Editor is dismissed and the new ACI is listed in the ACI Manager
window.
NOTE
228 Netscape Directory Server Administrator's Guide • May 2002
Click OK to dismiss the Add Users and Groups window.
The entries you selected are now listed on the Users/Groups tab in the ACI
editor.
At any time during the creation of the ACI, you can click the Edit
Manually button to display the LDIF statement that corresponds to
your input. You can modify this statement, but your changes will
not necessarily be visible in the graphical interface.